Custom Content Scrollbar
Custom Content Scrollbar has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Custom Content Scrollbar has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by SOPROBRO. Custom Content Scrollbar is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.
CVE-2025-31574Custom Content Scrollbar <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Custom Content Scrollbar
Author
SoftHopper
WordPress custom scrollbar is highly customizable WordPress plugin. Features include vertical and/or horizontal scrollbar(s), adjustable scrolling momentum, mouse-wheel, keyboard and touch support, ready-to-use themes and customization via CSS, RTL direction and many more. You can change almost 100+ demo style, ScrollBar scroll speed, Showing ScrollBar arrow button mode, ScrollBar auto hide mode, ScrollBar auto expand mode, ScrollBar moving mode by keyboard & other settings by using the options and shortcode of this plugin. Click here to see a live demo Features include: 100+ scrollbar demo Full page Scrollbar Single Content Scrollbar Custom Selector Scrollbar Vertical and horizontal scrollbar support Highly Customizable Enable TinyMCE Button ScrollBar scroll speed control ScrollBar arrow button mode control ScrollBar auto hide mode ScrollBar auto expand mode ScrollBar moving mode by keyboard Shortcode Powered Translation Ready Responsive for all devices All major browser supported Easy to handle
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C